40 lines
1.4 KiB
Nix
40 lines
1.4 KiB
Nix
{ lib, stdenv, fetchurl, fetchpatch }:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "openslp";
|
|
version = "2.0.0";
|
|
|
|
src = fetchurl {
|
|
url = "mirror://sourceforge/openslp/${version}/${version}/openslp-${version}.tar.gz";
|
|
sha256 = "16splwmqp0400w56297fkipaq9vlbhv7hapap8z09gp5m2i3fhwj";
|
|
};
|
|
|
|
patches = [
|
|
(fetchpatch {
|
|
name = "openslp-2.0.0-null-pointer-deref.patch";
|
|
url = "https://src.fedoraproject.org/rpms/openslp/raw/696fd55ae4fcea7beda0a25131dca8bfb14bbdf9/f/openslp-2.0.0-null-pointer-deref.patch";
|
|
sha256 = "186f3rj3z2lf5h1lpbhqk0szj2a9far1p3mjqg6422f29yjfnz6a";
|
|
})
|
|
(fetchpatch {
|
|
name = "openslp-2.0.0-CVE-2016-7567.patch";
|
|
url = "https://src.fedoraproject.org/rpms/openslp/raw/696fd55ae4fcea7beda0a25131dca8bfb14bbdf9/f/openslp-2.0.0-cve-2016-7567.patch";
|
|
sha256 = "0zp61axx93b7nrbsyhn2x4dnw7n9y6g4rys21hyqxk4khrnc2yr9";
|
|
})
|
|
./CVE-2016-4912.patch
|
|
./CVE-2019-5544.patch
|
|
];
|
|
|
|
meta = with lib; {
|
|
homepage = "http://www.openslp.org/";
|
|
description = "Open-source implementation of the IETF Service Location Protocol";
|
|
maintainers = with maintainers; [ ttuegel ];
|
|
license = licenses.bsd3;
|
|
platforms = platforms.all;
|
|
# never built on aarch64-darwin since first introduction in nixpkgs
|
|
broken = stdenv.isDarwin && stdenv.isAarch64;
|
|
knownVulnerabilities = [
|
|
"CVE-2023-29552: UDP Reflection Attack with ampliciation factor of up to 2200"
|
|
];
|
|
};
|
|
|
|
}
|